Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Pt_o2xgongxHmmKeSgZ3p9jA58A.roa
File: Pt_o2xgongxHmmKeSgZ3p9jA58A.roa (raw, json)
Hash identifier: 6rhzBgTxVFywxC63QVlgnIbWPq9zM0HEmF37wGNHD2M=
Subject key identifier: 3E:DF:E8:DB:18:28:9E:0C:47:9A:62:9E:4A:06:77:A7:D8:C0:E7:C0
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 01856ECB88C17D4DAC08053C42D6CC60AC74
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Pt_o2xgongxHmmKeSgZ3p9jA58A.roa
Signing time: Sun 01 Jan 2023 19:25:10 +0000
ROA not before: Sun 01 Jan 2023 19:25:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.64.0/23 maxlen: 24
45.155.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:88:c1:7d:4d:ac:08:05:3c:42:d6:cc:60:ac:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 1 19:25:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3edfe8db18289e0c479a629e4a0677a7d8c0e7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:b5:b9:bb:4a:ec:5e:66:1b:26:cb:2e:9d:
ff:a9:af:1b:16:16:e4:7e:48:73:47:99:8c:9a:63:
82:1e:4f:36:fb:da:53:82:e9:fc:4a:fb:52:cc:8d:
3d:d0:61:4c:0f:87:65:4d:92:d8:ac:e4:20:c5:d7:
93:b8:a7:67:81:65:35:7f:9f:eb:d7:7b:18:32:0d:
8e:c8:e6:96:78:3c:ed:ff:ef:99:e4:1d:05:bb:88:
dd:20:dd:0b:e4:63:40:89:8d:43:dd:11:5f:0a:42:
72:46:28:3e:0b:b1:2e:07:40:92:00:5e:cf:64:3c:
e7:7d:26:eb:5e:3e:27:8a:9e:53:90:2c:25:ec:94:
12:43:77:0d:d2:7e:c3:84:b1:21:85:9e:14:a2:1d:
55:d0:31:01:53:97:58:44:d1:ac:2f:71:44:37:59:
6f:f0:fd:b0:ba:17:51:19:e6:bf:28:5c:2f:17:30:
b6:21:4c:1e:18:35:94:73:34:83:49:72:5a:5b:41:
6f:9b:c6:10:50:4e:90:03:e2:15:59:f3:5e:96:49:
81:6b:a0:7d:6f:f1:2a:f1:31:bc:92:bd:db:20:14:
2d:a4:82:3b:79:fa:47:30:ee:8e:77:13:07:75:90:
36:74:6e:9f:0e:da:3e:15:59:25:fc:ff:8e:d4:cc:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DF:E8:DB:18:28:9E:0C:47:9A:62:9E:4A:06:77:A7:D8:C0:E7:C0
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Pt_o2xgongxHmmKeSgZ3p9jA58A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.64.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:18:88:fe:bc:87:69:42:2b:1a:4e:25:32:ea:30:43:43:59:
f2:fc:a8:44:3e:a7:fc:37:24:b6:28:39:76:75:f4:8d:92:87:
05:5b:c7:c7:47:b8:cc:78:41:42:5c:1f:07:4b:e9:e9:d0:1e:
13:69:c8:9c:d0:71:a8:10:4b:01:c5:6d:46:f9:b1:db:d7:60:
ec:1b:9d:34:03:09:68:8f:14:63:b4:8a:88:34:b5:dd:cc:0e:
60:76:ec:b3:32:3c:da:fd:39:70:1f:e3:be:1c:94:a8:9e:3c:
3a:52:e4:5d:e9:e1:93:d3:4c:e2:00:22:89:b4:fe:c7:67:59:
a0:b8:52:73:47:9a:69:2f:16:01:fb:a4:82:c1:fe:f0:ca:ea:
53:f2:f4:d3:19:4e:b5:64:91:6e:1e:12:01:90:34:a5:a7:b2:
0b:cd:a0:10:a5:c5:d2:e6:95:1f:82:d7:80:5e:9e:61:83:88:
8e:6a:c1:0f:c4:9b:fc:4e:b5:32:04:5e:c0:f6:29:2f:b9:f7:
5a:22:66:f5:84:dc:b8:57:1d:25:a8:0e:13:70:00:6c:4a:87:
bc:c2:a6:ae:e5:bb:86:42:43:65:0c:8c:cf:9d:59:2b:37:3d:
cf:20:ea:80:96:a0:f8:20:12:dd:95:dd:35:22:ee:dc:99:9f:
78:cd:54:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuy4jBfU2sCAU8QtbMYKx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTQ1YThiZGYyYmNhMTUwZjI1ZWQ1NGEyNzdiOGY2NTNl
ZmRiM2UwHhcNMjMwMTAxMTkyNTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWRmZThkYjE4Mjg5ZTBjNDc5YTYyOWU0YTA2NzdhN2Q4YzBlN2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBe1ubtK7F5mGybLLp3/qa8bFhbk
fkhzR5mMmmOCHk82+9pTgun8SvtSzI090GFMD4dlTZLYrOQgxdeTuKdngWU1f5/r
13sYMg2OyOaWeDzt/++Z5B0Fu4jdIN0L5GNAiY1D3RFfCkJyRig+C7EuB0CSAF7P
ZDznfSbrXj4nip5TkCwl7JQSQ3cN0n7DhLEhhZ4Uoh1V0DEBU5dYRNGsL3FEN1lv
8P2wuhdRGea/KFwvFzC2IUweGDWUczSDSXJaW0Fvm8YQUE6QA+IVWfNelkmBa6B9
b/Eq8TG8kr3bIBQtpII7efpHMO6OdxMHdZA2dG6fDto+FVkl/P+O1MwmjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD7f6NsYKJ4MR5pinkoGd6fYwOfAMB8GA1UdIwQY
MBaAFCsUWovfK8oVDyXtVKJ3uPZT79s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMt
MzA0MGJlZDNjY2NkLzEvUHRfbzJ4Z29uZ3hIbW1LZVNnWjNwOWpBNThBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2Nk
LzEvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZtAMA0G
CSqGSIb3DQEBCwUAA4IBAQAfGIj+vIdpQisaTiUy6jBDQ1ny/KhEPqf8NyS2KDl2
dfSNkocFW8fHR7jMeEFCXB8HS+np0B4Tacic0HGoEEsBxW1G+bHb12DsG500Awlo
jxRjtIqINLXdzA5gduyzMjza/TlwH+O+HJSonjw6UuRd6eGT00ziACKJtP7HZ1mg
uFJzR5ppLxYB+6SCwf7wyupT8vTTGU61ZJFuHhIBkDSlp7ILzaAQpcXS5pUfgteA
Xp5hg4iOasEPxJv8TrUyBF7A9ikvufdaImb1hNy4Vx0lqA4TcABsSoe8wqau5buG
QkNlDIzPnVkrNz3PIOqAlqD4IBLdld01Iu7cmZ94zVSn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:08 2024 by rpki-client on console-fra.rpki-client.org